VendorsNovellzenworks_configuration_managementany version
Vulnerabilities

Novell Zenworks Configuration Management any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

13CVEs
CVE-2015-0786
Stack-based buffer overflow in the logging functionality in the Preboot Policy service in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary code via unspecified vectors.
Published 2017-08-09 · Modified
10.0EPSS 0.236
CVE-2013-6345
Unspecified vulnerability in the ZCC page in Novell ZENworks Configuration Management (ZCM) before 11.2.4 has unknown impact and attack vectors related to an "Application Exception."
Published 2013-11-02 · Modified
10.0EPSS 0.015
CVE-2015-0780
SQL injection vulnerability in the GetReRequestData method of the GetStoredResult class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Published 2017-08-09 · Modified
9.8EPSS 0.082
CVE-2015-0782
SQL injection vulnerability in the ScheduleQuery method of the schedule class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Published 2017-08-09 · Modified
9.8EPSS 0.071
CVE-2015-0781
Directory traversal vulnerability in the doPost method of the Rtrlet class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to upload and execute arbitrary files via unspecified vectors.
Published 2017-08-09 · Modified
9.8EPSS 0.043
CVE-2015-0784
Rtrlet.class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to obtain Session IDs of logged in users via a value of ShowLogins for the maintenance variable.
Published 2017-08-09 · Modified
7.5EPSS 0.066
CVE-2015-0785
com.novell.zenworks.inventory.rtr.actionclasses.wcreports in Novell ZENworks Configuration Management (ZCM) allows remote attackers to read arbitrary folders via the dirname variable.
Published 2017-08-09 · Modified
7.5EPSS 0.065
CVE-2012-6345
Novell ZENworks Configuration Management before 11.2.4 allows obtaining sensitive trace information.
Published 2020-01-25 · Modified
7.5EPSS 0.011
CVE-2013-6347
Session fixation vulnerability in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows remote attackers to hijack web sessions via unspecified vectors.
Published 2013-11-02 · Modified
6.8EPSS 0.012
CVE-2013-6346
Cross-site request forgery (CSRF) vulnerability in the ZCC page in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Published 2013-11-02 · Modified
6.8EPSS 0.006
CVE-2015-0783
The FileViewer class in Novell ZENworks Configuration Management (ZCM) allows remote authenticated users to read arbitrary files via the filename variable.
Published 2017-08-09 · Modified
6.5EPSS 0.050
CVE-2012-6344
Novell ZENworks Configuration Management before 11.2.4 allows XSS.
Published 2020-01-25 · Modified
6.1EPSS 0.007
CVE-2013-6344
The ZCC page in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows attackers to conduct cross-frame scripting attacks via unknown vectors.
Published 2013-11-02 · Modified
4.3EPSS 0.009